TL;DR — Quick Summary
- The CFPB’s BNPL rule (effective 2026) requires lender licensing in 35+ states, bringing buy-now-pay-lender under the same regulatory framework as credit cards.
- ISOs offering BNPL at checkout must now ensure their BNPL partners are licensed — or risk merchant contracts being voided in non-compliant states.
- Merchants using BNPL programs should verify provider compliance now, as unlicensed BNPL agreements may become unenforceable starting January 2026.
What Is the CFPB BNPL Regulation?
In September 2024, the Consumer Financial Protection Bureau (CFPB) finalized a rule that brings buy-now-pay-later (BNPL) products under the same regulatory framework as credit cards. Effective January 2026, the rule classifies BNPL providers as “credit card issuers” under the Truth in Lending Act (TILA), triggering:
- State licensing requirements — BNPL providers must obtain lender licenses in each state where they operate (35+ states require licenses as of 2026).
- Disclosure requirements — Standardized fee and interest disclosures, similar to credit card Schumer boxes.
- Dispute resolution rights — Consumers get the same chargeback and dispute rights as credit card holders.
- Periodic statement requirements — Monthly statements showing outstanding balances, payment due dates, and accrued interest.
According to the CFPB, the U.S. BNPL market reached $125 billion in 2025, with 23% of consumers using BNPL at least once per year. The rule responds to a 400% increase in consumer complaints about BNPL products since 2020 — primarily around hidden fees, unclear payment schedules, and lack of dispute resolution.
What This Means for ISOs
ISOs who offer BNPL at checkout (through partners like Affirm, Klarna, Afterpay, or PayPal Pay Later) now face new compliance obligations:
1. Verify BNPL Partner Licensing
Before January 2026, ISOs should request written confirmation from their BNPL partners that they hold lender licenses in all states where the ISO’s merchants operate. If a BNPL provider is unlicensed in a state where your merchant is located, the BNPL contract may be unenforceable — and the merchant could be liable for facilitating unlicensed lending.
2. Update Merchant Agreements
ISOs should add compliance warranties to merchant agreements, requiring merchants to confirm they will only offer BNPL products from licensed providers. This protects the ISO from downstream liability if a merchant uses an unlicensed BNPL service.
3. Prepare for Disclosure Changes
BNPL checkout flows will need to display standardized fee disclosures starting in 2026. ISOs offering BNPL should work with their POS provider to ensure checkout screens comply with the new TILA requirements.
4. Monitor Chargeback Changes
Because BNPL transactions will now have the same dispute rights as credit cards, merchants may see increased chargebacks from BNPL transactions. ISOs should train merchants on BNPL dispute handling and ensure chargeback management tools cover BNPL transactions.
| Requirement | Before 2026 | After CFPB Rule (2026+) |
|---|---|---|
| State Lender License | Not required in most states | Required in 35+ states |
| Fee Disclosure | Provider-specific, varies widely | Standardized TILA disclosure required |
| Consumer Dispute Rights | Limited, provider-defined process | Same as credit card chargebacks |
| Periodic Statements | Not required | Monthly statements required |
| Late Fee Caps | No federal limit | Subject to credit card late fee rules ($8 proposed) |
| ISO Liability | Minimal | Potential if unlicensed BNPL offered |
What This Means for Merchants
Merchants who offer BNPL at checkout should take these steps before January 2026:
1. Audit Your BNPL Providers
Request a “state licensing map” from each BNPL provider you use. Confirm they are licensed in every state where you have customers. If they are not licensed in a state, you may need to disable BNPL for customers in that state until the provider obtains a license.
2. Update Your Website Checkout
Work with your e-commerce platform or POS provider to add the required fee disclosures to BNPL checkout flows. The CFPB’s final rule specifies the exact format and content — expect this to be rolled out as a software update by most major platforms in Q4 2025.
3. Train Staff on Dispute Handling
BNPL customers will now have the same chargeback rights as credit card customers. Train your customer service team on handling BNPL disputes, and ensure your chargeback management tool covers BNPL transactions (not all do).
4. Review BNPL Contracts
Have your legal counsel review your BNPL provider agreements for compliance warranties. Add language requiring the provider to indemnify you if they are unlicensed in a state where you operate.
How OrderPin Helps ISOs Navigate BNPL Regulation
Pre-Vetted BNPL Partners
OrderPin’s white-label platform integrates only with BNPL providers who are licensed in all 50 states. We handle compliance verification so you don’t have to.
Compliant Checkout Flows
Our POS and online ordering modules are updated with the CFPB’s required BNPL disclosures. Merchants using OrderPin are automatically compliant when the rule takes effect.
BNPL Chargeback Tools
OrderPin’s chargeback management module includes BNPL transactions. Track, dispute, and resolve BNPL chargebacks alongside credit card disputes in a single dashboard.
State-by-State Licensing Requirements
As of January 2026, the following states require BNPL lender licenses:
Mandatory Licensing (35 states): California, Texas, New York, Florida, Illinois, Pennsylvania, Ohio, Georgia, North Carolina, Michigan, New Jersey, Virginia, Washington, Arizona, Massachusetts, Tennessee, Indiana, Missouri, Maryland, Wisconsin, Minnesota, Colorado, South Carolina, Alabama, Louisiana, Kentucky, Oregon, Oklahoma, Connecticut, Utah, Nevada, Arkansas, Mississippi, Kansas, Iowa.
No License Required (15 states): Delaware, Montana, New Hampshire, South Dakota, Vermont, West Virginia, Wyoming, Alaska, Hawaii, Idaho, Maine, Nebraska, North Dakota, Rhode Island, Washington D.C.
Note: This list is subject to change. ISOs should verify licensing requirements with their BNPL partners and legal counsel.
Frequently Asked Questions
Does this regulation apply to all BNPL providers?
Yes. The CFPB rule applies to any provider offering “pay-in-4” or similar deferred-payment products where the consumer pays in four or fewer installments. This includes Affirm, Klarna, Afterpay, PayPal Pay in 4, Zip, Sezzle, and similar services. Traditional installment loans (6+ payments) and credit cards were already regulated.
What happens if a merchant uses an unlicensed BNPL provider?
In states requiring licensing, BNPL contracts from unlicensed providers may be voidable — meaning the consumer could potentially avoid paying the debt, and the merchant could be left without recourse. Merchants may also face regulatory fines for facilitating unlicensed lending. ISOs who introduce unlicensed BNPL providers to merchants could share in this liability.
How do I check if my BNPL partner is licensed?
Request a “state licensing map” or “license certificate” directly from your BNPL partner. Reputable providers will have this documentation ready. You can also check state banking regulator websites (e.g., California DFPI, New York DFS) for publicly searchable license databases. OrderPin provides pre-vetted BNPL partner integrations that are confirmed licensed in all 50 states.
Will BNPL fees increase because of regulation?
Likely yes. Licensing costs, compliance infrastructure, and consumer dispute rights all add expense for BNPL providers. Analysts at Morgan Stanley project BNPL merchant fees could rise 0.5-1.5% (e.g., from 4% to 4.5-5.5%). Merchants should budget for higher BNPL costs in 2026 and beyond.
Can ISOs still offer BNPL after this regulation?
Yes — but only through licensed BNPL partners. ISOs should not “white-label” BNPL themselves unless they obtain lender licenses (expensive and complex). The safer path is to partner with established BNPL providers who have already obtained state licenses. OrderPin’s pre-integrated BNPL options (Affirm, Klarna, Afterpay) are confirmed licensed, allowing ISOs to offer BNPL without compliance risk.
Conclusion
The CFPB’s BNPL regulation is a watershed moment for the buy-now-pay-later industry — and for ISOs who offer BNPL at checkout. The unregulated era is over. Starting in 2026, BNPL will be treated like the credit product it is, with licensing requirements, disclosure mandates, and consumer protections that mirror credit cards.
For ISOs, the key actions are clear: verify your BNPL partners are licensed, update merchant agreements with compliance warranties, prepare checkout flows for new disclosure requirements, and ensure chargeback tools cover BNPL transactions. Merchants should do the same — plus train staff on BNPL dispute handling.
The cost of non-compliance is not theoretical. In states with licensing requirements, unlicensed BNPL contracts may be void. Merchants could lose the ability to collect on BNPL transactions. ISOs could share in regulatory fines. The time to prepare is now — before January 2026, when the rule takes effect and enforcement begins.
OrderPin helps ISOs navigate this transition with pre-vetted, fully-licensed BNPL partner integrations, compliant checkout flows, and BNPL chargeback management tools. The regulation is coming — but with the right platform, you will be ready.
About OrderPin
OrderPin is a white-label POS platform built for ISO and MSP partners. We integrate only with fully-licensed BNPL providers, include compliant checkout disclosures, and offer BNPL chargeback management — so you can offer buy-now-pay-later without compliance risk.
Learn more about OrderPin’s white-label solution
